The domain of IT-Grundschutz in verinice.veo already offers:

• Structure analysis
• Assessment of protection needs
• Building block modeling
• IT-Grundschutz check
• Maintenance and continuous improvement
• Reporting: Creation of the reference documents required for certification
• Officially licensed IT-Grundschutz compendium of the BSI
  • Building blocks
  • Requirements
  • Hazards
• Profiles
   
  • “Standard and core protection” profile
• Automatic creation of the threat overview through integrated mapping of the cross-reference tables
• Automatic inheritance of the protection requirement
• Documentation of the implementation of requirements and security measures
• Assignment of responsible persons for modules, target objects, requirements, etc.
• Use of all recorded objects in all domains – objects recorded in the basic protection can be used in data protection
   
• Cloud native: Can be used as a SaaS solution or private cloud
• Version history: Revision-secure storage of all entries in the object history with the option of recovery
   
• Multi-Scope: an object can be used in any number of information networks
• Multi-Part: objects can be nested in any way, e.g. “location-building-room” or “department-team-employee”. Complex structures can be easily mapped.
• Links: objects can be linked, for example, to designate the person responsible for a module or to automatically pass on the protection requirement between dependent systems.
• Self-Customizing: customizable levels for protection needs and risk assessment
• Adding further categories to assess information security, such as “authenticity”

IT-Grundschutz users can expect the following features in the next releases of verinice.veo:

• Tools for data transfer from verinice(.PRO)
  • Transfer of target objects
  • Transfer of modeled building blocks
  • Transfer of documented requirement implementations
  • Transfer of user authorizations
     
  • Transfer of notes and attachments
• Fine-grained rights and role management
• Background processing: Moving long-running requests into the background and notification on completion (import, export, report generation) for more stability even with an interrupted network connection
• Reduction of documentation effort for implementing requirements through “organization-wide implementation” and “implementation of the implementation”

Our roadmap provides a complete overview of planned features.

The migration to the new verinice generation will be made available by the verinice team in early 2026. Have you been working with IT-Grundschutz or the IT-Grundschutz perspective so far? Then choose the Grundschutz Bundle and continue managing your ISMS in this domain. 

The new verinice as SaaS verinice.cloud and as verinice.onprem for in-house operation is ready for use, and the range of features is gradually expanding. We transparently report on progress here, and you decide when the right time is for you to make the switch. SerNet will continue to support the classic verinice until 2027. 

We are also making additional content, such as IT-Grundschutz profiles, minimum standards, etc., available in phases for the new verinice generation.